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March 30, 2017 


VIA EMAIL AND U.S. MAIL 


Office of the Attorney General Brian E. Frosh 

Attn: Security Breach Notification 

200 St. Paul Place 

Baltimore, MD 21202 

Email: idtheft@oag.state.md.us 

Re: Notice of Data Security Event 

Dear Attorney General Frosh: 

We represent Offit Kurman Attorneys at Law (“Offit Kurman”), 4800 Montgomery Lane, 
Bethesda, MD 20814, and write to notify you of a data event that may have compromised the 
security of personal information of one (1) of Maryland resident. This notice will be supplemented 
with any substantive facts learned subsequent to its submission. By providing this notice, Offit 
Kurman does not waive any rights or defenses under Maryland law. 

Nature of the Data Security Event 

Offit Kurman represented a client in a legal proceedings. Through the course of the representation, 
the client provided certain sensitive personal information to Offit Kurman. At the conclusion of 
the representation, Offit Kurman sought to return the information to the client. The information, 
in the form of a thumb drive and transmittal letter, was contained in an envelope and sent to the 
client by U.S. mail. The envelope was returned to Offit Kurman when it was damaged during the 
mailing. The returned envelope did not contain the transmittal letter or the thumb drive. Offit 
Kurman immediately contacted the client to make him aware of this incident. Offit Kurman also 
began an investigation to determine the content of the thumb drive. Through the investigation, 
Offit Kurman believes the data on the thumb drive may potentially have included the name, Social 
Security number, driver’s license number, tax ID number, and/or financial information of its client 


Mullen.law 






Office of the Attorney General 
March 31, 2017 
Page 2 

and potentially other family members, which includes one (1) Maryland resident. Offit Kurman is 
unaware of any actual or attempted misuse of personal information. 

Notice to Maryland Resident 

On April 12, 2016, Offit Kurman contacted its client to disclose this incident. Offit Kurman’s 
client recently confirmed the information of another family member may have been included in 
thumb drive. On March 30, 2017, Offit Kurman will send written notice of this incident to the one 
(1) Maryland resident, its client, in substantially the same form as the letter attached here as Exhibit 
A. 


Other Steps Taken and To Be Taken 

In addition to providing written notice of this incident to the affected individual as described above, 
affected individuals will also be provided access to credit monitoring and identity restoration 
services at no cost to the individual. While Offit Kurman has not found evidence of actual or 
attempted misuse of information relating to this incident, Offit Kurman is also providing 
information regarding how to protect against identity theft and fraud. Offit Kurman is assessing its 
policies, procedures, and technical safeguards relating to data privacy and network security to 
reduce the likelihood of a similar incident from occurring in the future. 

Contact Information 

Should you have any questions regarding this notification or other aspects of the data security 
event, please contact us at 267-930-4799. 


Very truly yours, 

M - 

Sian Schafle of 
MULLEN COUGHLIN LLC 
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OffitlKurman 

Attorneys At Law 



MARYLAND 

PENNSYLVANIA 

VIRGINIA 

NEW JERSEY 

NEWYQRK 

DELAWARE 

WASHINGTON. DC 


March 31, 2017 


Re: Notice of Data Breach 



Offit Kurman Attorneys at Law (“Offit Kurman”) is writing to notify you of an incident that may 
impact the security of some of your personal information. While we are unaware of actual or 
attempted misuse of your information, this letter contains details about the incident and our 
response, as well as steps you can take to protect your information should you feel it is appropriate 
to do so. 

What Happened? Offit Kurman represented in a 2011 to 2014 matter. This 

representation involved the provision of sensitive personal information to Offit Kurman. At the 
conclusion of this representation, we prepared a package to return materials, including a thumb 
drive and a transmittal letter contain sensitive personal information. On February 29, 2016, we 
sent the package via U.S. mail. On On April 5, 2016, the package was returned to Offit Kurman 
after being damaged in transit. The returned envelope did not contain the transmittal letter and 
thumb drive. 

What Information Was Involved? Based on our investigation, we believe that the data on the 
thumb drive may, have included personal information related to you, including your name, Social 
Security number, driver’s license number, tax ID number, and/or financial information. We are 
unaware of attempted or actual misuse of personal information as a result of this incident. 

What We Are Doing. Offit Kurman takes the privacy of your information very seriously, and 
apologizes for the inconvenience this incident may have caused you. Upon receiving the returned 
envelope, we commenced an internal investigation to determine what data was stored on the 
missing thumb drive. We have been working with privacy and data security legal counsel to assist 
with this investigation of, and response to, this incident. We will continue to review our procedures 
and enhance our policies that address data privacy and security. 

In addition to the steps taken above, we are providing you with information on how to better protect 
against identity theft and fraud. In an abundance of caution, we also offered to provide you with 
access to one (1) year of free credit monitoring and identity restoration services. Information on 
these services, as well as instructions on how to enroll, can be found below: 

If you believe there was fraudulent use of your information as a result of this incident and would 
like to discuss how you may be able to resolve those issues, please reach out to an Experian agent. 
If, after discussing your situation with an agent, it is determined that identity restoration support is 






needed then an Experian Identity Restoration agent is available to work with you to investigate 
and resolve each incident of fraud that occurred from the date of the incident (including, as 
appropriate, helping you with contacting credit grantors to dispute charges and close accounts; 
assisting you in placing a freeze on your credit file with the three major credit bureaus; and 
assisting you with contacting government agencies to help restore your identity to its proper 
condition). 

Please note that this offer is available to you for one year from the date of this letter and does not 
require any action on your part at this time. 

The Terms and Conditions for this offer are located at www.ExperianIDWorks.com/restoration. 
You will also find self-help tips and information about identity protection at this site. 

While Identity Restoration assistance is immediately available to you , we also encourage you to 
activate the fraud detection tools available through Experian Identity Works SM as a complimentary 
one-year membership. This product provides you with superior identity detection and resolution 
of identity theft. To start monitoring your personal information please follow the steps below: 

• Ensure that you enroll by: March 19, 2018 (Your code will not work after this date.) 

• Visit the Experian IdentityWorks website to enroll: 
www.experianidworks.com/3bcreditone 

• Provide your activation code: 

If you have questions about the product, need assistance with identity restoration that arose as a 
result of this incident or would like an alternative to enrolling in Experian IdentityWorks online, 
please contact Experian’s custome^are team at 877.890.9332 by March 19, 2018. Be prepared 
to provide engagement number as proof of eligibility for the identity restoration services 

by Experian. 

ADDITIONAL DETAILS REGARDING YOUR 12-MONTH EXPERIAN 
IDENTITYWORKS MEMBERSHIP: 

A credit card is not required for enrollment in Experian IdentityWorks. 

You can contact Experian immediately regarding any fraud issues, and have access to the 
following features once you enroll in Experian IdentityWorks: 

■ Experian credit report at signup: See what information is associated with your credit 
file. Daily credit reports are available for online members only. 1 

■ Credit Monitoring: Actively monitors Experian, Equifax and Transunion files for 
indicators of fraud. 

■ Internet Surveillance: Technology searches the web, chat rooms & bulletin boards 24/7 
to identify trading or selling of your personal information on the Dark Web. 

■ Identity Restoration: Identity Restoration specialists are immediately available to help 
you address credit and non-credit related fraud. 


Offline members will be eligible to call for additional reports quarterly after enrolling. 




■ Experian Identity Works ExtendCARE™: You receive the same high-level of Identity 
Restoration support even after your Experian IdentityWorks membership has expired. 

■ $1 Million Identity Theft Insurance 2 : Provides coverage for certain costs and 
unauthorized electronic fund transfers. 


What you can do to protect your information: There are additional actions you can consider 
taking to reduce the chances of identity theft or fraud on your account(s). Please refer to 
www.ExperianIDWorks.com/restoration for this information. 

What You Can Do. We also encourage you to remain vigilant, to review your account statements 
regularly, and to monitor your credit reports for suspicious activity. Under U.S. law, you are 
entitled to one free credit report annually from each of the three major credit bureaus. To order 
your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. You 
may also contact the three major credit bureaus directly to request a free copy of your credit report. 

At no charge, you can also have these credit bureaus place a “fraud alert” on your file that alerts 
creditors to take additional steps to verify your identity prior to granting credit in your name. Note, 
however, that because it tells creditors to follow certain procedures to protect you, it may also 
delay your ability to obtain credit while the agency verifies your identity. As soon as one credit 
bureau confirms your fraud alert, the others are notified to place fraud alerts on your file. Should 
you wish to place a fraud alert, or should you have any questions regarding your credit report, 
please contact any one of the agencies listed below. Information regarding security freezes is also 
available from these agencies. 


Equifax 

P.O. Box 105069 
Atlanta, GA 30348 
800-525-6285 
www.equifax.com 


Experian 
P.O. Box 2002 
Allen, TX 75013 
888-397-3742 
www.experian.com 


TransUnion 
P.O. Box 2000 
Chester, PA 19022-2000 
800-680-7289 
www.transunion.com 


You can further educate yourself regarding identity theft, fraud alerts, security freezes, and the 
steps you can take to protect yourself, by contacting the Federal Trade Commission or your state 
Attorney General. The Maryland Attorney General can be contacted at 200 St. Paul Place, 16th 
Floor, Baltimore, MD 21202, (888) 743-0023, www.oag.state.md.us . The Federal Trade 
Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580, 
www.ftc.gov/bcp/edu/microsites/idtheft/ . 1-877-ID-THEFT (877-438-4338); TTY: 866-653- 
4261. The Federal Trade Commission also encourages those who discover that their information 
has been misused to file a complaint with them. You can obtain further information on how to file 
such a complaint and steps you can take to avoid identity theft by way of the contact information 
listed above. Instances of known or suspected identity theft should also be reported to law 
enforcement. This notice was not delayed as the result of a law enforcement investigation. 


2 Identity theft insurance is underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). The 
description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the 
policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all 
jurisdictions. 



For More Information. We recognize that you may have questions that are not answered in this 
letter. For questions regarding this notice, the incident^mc^tep^ou may take to protect yourself 
against identity theft and fraud, you may call me at 

Again, we regret any inconvenience this incident may cause you. We remain committed to 
safeguarding information in our care and will continue to take proactive steps that address your 
privacy. 


Sincerely. 



Eric Pelletier, Esq. 

Offit Kurman Attorneys at Law 
4800 Montgomery Lane 
Bethesda, MD 20814 



